824 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in hostapd_wireless_event_wireless()  local
835 			   iwe->cmd, iwe->len);  in hostapd_wireless_event_wireless()
836 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in hostapd_wireless_event_wireless()
841 		    (iwe->cmd == IWEVMICHAELMICFAILURE ||  in hostapd_wireless_event_wireless()
842 		     iwe->cmd == IWEVCUSTOM)) {  in hostapd_wireless_event_wireless()
853 		switch (iwe->cmd) {  in hostapd_wireless_event_wireless()
855 			if (iwe->u.data.length > end - custom)  in hostapd_wireless_event_wireless()
857 			buf = malloc(iwe->u.data.length + 1);  in hostapd_wireless_event_wireless()
860 			memcpy(buf, custom, iwe->u.data.length);  in hostapd_wireless_event_wireless()
861 			buf[iwe->u.data.length] = '\0';  in hostapd_wireless_event_wireless()
867 		pos += iwe->len;  in hostapd_wireless_event_wireless()